Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cceccb13-45ee-36ac-b696-dd9050a39d5b.roa
File:                     cceccb13-45ee-36ac-b696-dd9050a39d5b.roa (raw, json)
Hash identifier:          kOye+RNMOau7nhFgHR2sSg2ALuQlHe6crQMSBtIubmk=
Subject key identifier:   45:74:DF:F4:A5:DB:E9:75:9E:76:36:2D:2C:94:B0:88:3D:78:91:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2649A01D56C6C1EFD75D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cceccb13-45ee-36ac-b696-dd9050a39d5b.roa
Signing time:             Tue 28 Jan 2025 17:43:28 +0000
ROA not before:           Tue 28 Jan 2025 17:43:28 +0000
ROA not after:            Mon 28 Apr 2025 16:43:28 +0000
asID:                     33491
IP address blocks:        76.141.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:64:9a:01:d5:6c:6c:1e:fd:75:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:43:28 2025 GMT
            Not After : Apr 28 16:43:28 2025 GMT
        Subject: CN=8ebc85ea-b32a-4e55-9e8f-76f1172a1b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:e6:46:8d:38:35:bf:29:00:0e:25:4d:ec:
                    ed:8e:23:fb:38:bd:28:85:36:41:03:af:d0:a8:cc:
                    cc:7d:8d:2d:dd:31:05:ed:42:da:0b:04:64:4d:1c:
                    df:02:ab:43:29:57:b9:f5:b3:a4:c6:f7:b8:a6:60:
                    93:6f:df:b6:0b:03:6b:ff:9b:2e:ee:29:ab:1a:c4:
                    4e:6f:fa:c5:2f:70:8f:06:62:91:b1:e4:d7:d0:88:
                    d4:7c:0b:46:a8:14:5d:f8:cd:5e:1e:06:f1:78:ca:
                    06:45:1d:47:78:68:b7:77:17:30:92:9a:2a:98:30:
                    61:65:a1:68:d4:c6:61:36:cf:a6:ab:e9:03:6a:a5:
                    97:ca:84:08:bf:b9:03:44:60:6b:55:17:77:c3:0b:
                    9d:d8:32:ff:87:e5:1e:a3:13:f0:1c:0a:34:6e:44:
                    fc:33:7f:f6:72:75:5e:d3:dd:38:5e:6f:6d:9f:f5:
                    30:b9:41:19:20:b8:33:ba:5d:e2:5a:5e:f1:60:12:
                    25:88:bc:ca:84:a3:9d:19:40:75:a7:83:d1:54:36:
                    27:41:1a:fe:b0:e7:47:76:0c:6c:81:67:ec:a9:7e:
                    7d:14:7e:61:03:69:71:f7:95:7a:39:db:fb:53:42:
                    22:de:8b:33:99:73:6d:e6:a1:8c:10:30:66:86:f1:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:DF:F4:A5:DB:E9:75:9E:76:36:2D:2C:94:B0:88:3D:78:91:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cceccb13-45ee-36ac-b696-dd9050a39d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:42:1f:dc:0e:8c:56:c6:e8:f1:7c:47:5a:a0:41:82:ef:
         89:ab:7e:f8:3b:c0:34:26:d9:49:f7:cc:3b:47:47:c4:2d:2f:
         ec:9e:f6:4a:91:19:17:07:e4:dc:cb:87:d9:78:3a:06:f7:40:
         b8:a8:a7:14:30:be:fd:40:87:9e:5a:25:04:2b:dc:b6:a0:b0:
         93:79:d6:02:e0:7c:a3:65:54:30:6f:e2:2e:d9:bc:43:00:3d:
         3a:48:f8:e1:08:f3:7f:a6:ef:1b:98:28:f7:d2:b3:b8:c0:57:
         49:64:30:bd:c3:0f:94:b9:57:ec:6a:e0:9b:d7:d9:c6:6f:68:
         2b:d8:80:27:a3:12:15:59:f5:ab:d7:dc:b4:76:8e:27:1b:4c:
         05:c5:55:58:44:34:57:4b:2a:93:9c:9b:7e:cf:85:af:c6:eb:
         62:b6:ae:cc:20:83:25:bf:fd:a2:bd:6a:df:42:a1:11:94:d2:
         aa:9e:7b:81:d4:8c:ed:30:eb:eb:66:9f:cb:23:e3:6c:62:71:
         df:2d:0a:b4:a1:18:5e:1b:a8:75:8c:64:23:0e:a5:64:ba:f6:
         b8:65:da:42:09:93:3a:c6:bd:a9:53:56:aa:c6:a9:50:cf:be:
         b9:e5:24:a7:ec:28:1e:ce:fd:ca:8f:7a:9f:c2:53:0a:82:9b:
         50:aa:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:13:55 2025 by rpki-client on console.sobornost.net